OneDrive for Business and SharePoint Online enable agile collaboration and increase the device and application flexibility for distributed users. This enables dramatically increased efficiency and multi-dimensional content sharing. But, no two users are identical – so, however they share or collaborate, how confident are you in doing it without introducing risk into the organization? To ease your mind, and lower your risk, this session will focus on the security controls within SharePoint Online and ODB that can lower your heart rate.

1. Securing your OneDrive for
Business and SharePoint
Online Configuration
Adam Levithan
November 13, 2017

2. Community Member
Since 2007
@collabadam
Adam Levithan
Senior Product Manager
Secure Collaboration
Copyright 2017 Exostar LLC | All Rights Reserved 2

3. https://www.surveymonkey.com/r/T7KM88X

4. Agenda

5. Hub for TeamworkCo-AuthorConnect Across
the Organization
Intranets &
Content Management
Email & Calendar
TeamsOffice AppsYammerSharePointOutlook
Office 365 Groups
Single team membership
across apps and services
Microsoft Graph
Suite-wide intelligence
connecting people and content
Security and Compliance
Centralized policy management

6. File Share vs. Collaboration

7. Customers are sharing more than ever

8. Threat Landscape

9. MALICIOUS
INSIDER
ACCIDENTAL
DATA EXPOSURE
MALICIOUS
OUTSIDER
59% 23% 14%
SOURCE OF BREACH DATA – 2013-2017 – breachlevelindex.com
How Do Data Leaks Happen?

10. Things to Consider
Known Vulnerabilities
• Enable business apps
• Block “bad” apps
• Limit app functions
• Limit file types
• Block websites
• Exploits
• Malware
Unknown Vulnerabilities
• Detect Malicious websites
• Bad domains
• Stolen credentials
• Dynamic analysis
• Static analysis
• Attack techniques
• Anomaly detection
• Analytics

11. 12
SharePoint
Office 365
Azure
E3 E5 EM+S
E3
EM+S
E5
AAD
Free
AAD
Basic
AAD
Premiu
m

12. Agenda

13. Putting the security
puzzle pieces
together
Originally used at www.metalogix.com

14. Office 365 admin center
Security & Compliance Center
SharePoint admin center
Microsoft PowerShell
OneDrive admin center

17. Control users
Manage
Restrict
Conditional access
Granular policies
Prevent

18. Intuitive sharing controls with flexible policies
for internal and external sharing
Flexible sharing controls for targeted
scenarios
alerts of suspicious behavior using
Advanced Security Management
Minimize risk with secure external sharing
without sign-in

20. Sharing Demonstration
•SharePoint
•OneDrive

21. Actionable insights and management
control

22. Auditing Demonstration
•SharePoint Auditing

25. Demonstration
• SharePoint Admin Center
• OneDrive Admin Center

26. If I were to start over: Use Groups
Apps
One identity Federated resources Loose coupling
Azure AD is the master for
group identity & membership
Office 365 services extend with
their data
Service notify each other of
changes to a group
Attributes
Flow
User creates new group
for teamwork
Group experience
populated in app of choice
Group identity created in
Azure Active Directory

27. Agenda

30. Are you sure you want to restore your OneDrive?
Restoring your OneDrive to 8/12/2017 3:49:02 PM will revert 2300 changes.
Restore Cancel

31. 2013 2014 2015 2016 2017
SharePoint Online
Modernize the
SharePoint Online
admin UX
Add new settings
for new features
New Office 365
admin centers
Release the server
admin experience
to Office 365
SharePoint
Server

35. 2017 Late 2018Early 2018

36. Limited browser access scoped at the site collection level
SharePoint Migration Tool (Preview)
Idle session sign out (Preview)
New Admin Experience for Sharing ControlsPreservation policies (Available Now)
Secure external sharing without sign-in
Multi-Geo Capabilities with OneDrive (Preview)
SharePoint Admin Center (Preview)
Service-level encryption with customer key (Available Now) File Restore (Preview)

37. Questions
Adam Levithan
@Collabadam
Adam.Levithan@Exostar.com
Please Complete our Survey
https://www.surveymonkey.com/r/T7KM88X